Personal data and cookies

This document is intended to inform you about:

1. how your personal data are processed when you use the AgoraPay website
2. the cookies on this website.

You might provide us (Crédit Agricole Payment Services - the website publisher) with your personal data when you use the data collection methods and tools made available to you on the website.

The data collected may be processed, automatically or not, in accordance with the General Data Protection Regulation (GDPR) of 27 April 2016 and subject to the terms attached to each data collection method or feature, as described in these Terms of Use and this document.

The personal data collected via the different features or data collection methods on the website are collected by Crédit Agricole Payment Services, the website publisher and the data controller as defined by the GDPR, unless it is expressly stated on the data collection method that the data controller is a third party. In this case, by law, the data controller must specify the nature of its data processing, for which it alone is responsible.

Personal data that you provide when using the website are collected and processed by Crédit Agricole Payment Services to allow access to the website, to respond to requests made via the contact forms, to fulfil contractual or pre-contractual obligations at your request, to produce usage statistics, to resolve incidents affecting use of the website, to comply with our legal obligations, or to pursue our legitimate interests or those of a third party without infringing your rights.

On the legal basis of legitimate interest, data may be processed for the purpose of customer prospecting, subject to compliance with the applicable regulations (right to object).

You are not required to answer all the questions asked.

Information that you are required to provide is indicated by an asterisk. If you do not provide this information, Crédit Agricole Payment Services will not be able to process your request.

Your personal data are kept and processed for as long as necessary to achieve the purpose for which they were collected and for a maximum of:

• 25 months from when the cookies were sent to your browser;
• 14 months for connection data (IP address, logs, etc.);
• 12 months after a contact request for your name, company name, phone number, geographic area, annual turnover and payment channels.

You have rights over the personal data that Crédit Agricole Payment Services collects and processes in connection with your use of the website and your requests. These rights, which may be exercised subject to the conditions laid down by the regulation, are:

• the right to access, correct and delete data (that are inaccurate, incomplete, incorrect or out of date);
• the right to object to your data being processed at any time for customer prospecting;
• the right to limit how your data are processed;
• the right to data portability;
• the right to set general or specific instructions regarding the fate of your personal data after your death;
• the right to withdraw your consent at any time;
• the right to lodge a complaint with a supervisory authority.

You may exercise these rights by writing to Crédit Agricole Payment Services, the website publisher, at: Crédit Agricole Payment Services, FAO: Délégué à la Protection des données CAPS [Data Protection Officer] - 83, Boulevard des Chênes Bâtiment Alsace - BP 48 78042 Guyancourt CEDEX.

Or by email to: dpo.caps@ca-ps.com.

You may also, in the event of a dispute, file a complaint with the CNIL. Website: http://www.cnil.fr; postal address: 3 Place de Fontenoy, 75007 Paris.

Your personal data may be shared with the following recipients:

• Crédit Agricole regional branches
• LCL [subsidiary of Crédit Agricole]

Pursuant to the applicable regulations and the recommendations of the CNIL, any prospecting activities that use an automated electronic communication, email, SMS/MMS or fax system, as well as any sale or rental of your data for the purpose of prospecting using these methods, may only be carried out if you do not object to such use.

You may object to receiving such prospecting messages from Crédit Agricole Payment Services at any time by ticking the corresponding boxes on the website. Every prospecting email will also include an option to object to receiving further prospecting emails from Crédit Agricole Payment Services.

You may object, at any time and at no cost, to prospecting by other means by writing to the contacts provided in the section "How to exercise your rights".

This Website uses cookies to collect information.

Cookies (including tracking cookies) are activity markers that may, subject to your agreement, be placed on your device and read when you use this Website. Cookies allow their issuer to identify the device on which they are stored and to collect certain information during their lifespan (prior to its expiry and deletion). Only the issuer of a cookie may read it or modify the information it contains.

We use cookies to:

• Compile data to optimise browsing on the website and to offer a user experience that meets your needs.

The cookies we use allow us to: generate statistics on the number of visits and use of the various features of our website (sections, routes, pages viewed)

• Improve the relevance and usability of our services.

We use Google Analytics and, subject to your consent, may transfer your browsing data between the website and Google Analytics for up to 13 months.

The data are collected anonymously and neither CAPS nor Google Analytics can use them to identify you.

Data collected in this way will not be passed on to third parties or used for any other purpose.

• Ensure our website works properly. We use cookies to allow you to access restricted and personal areas of the website using credentials or data that you have entrusted to us.

Implement security features, for example, when you are asked to reconnect to content or a service once your session has timed out. Facilitate communication when providing a service electronically that you have expressly requested. These cookies are issued and placed on your device by CAPS. They cannot be deactivated because we cannot provide our services without them.

The cookies stored on your computer or any other device when you access this Website are placed there by Crédit Agricole Payment Services and its subcontractors.

Cookies may also be placed on your device by third parties who are working with us on joint marketing campaigns. These third parties may display advertising banners on behalf of Crédit Agricole Payment Services and other Crédit Agricole Group companies. None of these third parties collect personal data that can be used to personally identify you.

In many cases, you will have already agreed to our partners' cookies being placed on your device when browsing other websites. If this is not the case, our partner will inform you that a cookie has been placed on your device and, if necessary, obtain your consent before doing so.

If you do not want us to collect statistical data about how you browse our site, you can deactivate the opt-in by clicking on the link below:

Your browser will no longer provide any information to our analytics tool. Deactivating the opt-in will not affect how the website works or the quality of the service in any way.

For more information about cookies, you can visit the CNIL website http://www.cnil.fr/vos-droits/vos-traces/les-cookies/